Microsoft OAuth Authentication and Thunderbird in 2024

Microsoft has made some changes to authentication for their hosted email services for business and academic accounts. This topic describes these changes and how to adjust to them. As of the date of this article, February 3, 2023, this information is still evolving and subject to change. == Changes to Authentication == Microsoft has instututed the following changes : * [https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online Deprecating basic authentication] (username/password), and is instead now requiring oAuth authentication. * Disabling SMTP Auth entirely, in some cases. For new accounts, SMTP always starts disabled. In addition, there are some restrictions on SMTP that are not currently understood. Microsoft have also changed the way they classify certain clients, and Thunderbird’s previous oAuth setup does not properly qualify as desktop client. As a result, we have been forced to make configuration changes to Thunderbird which may have side effects for users. == Changes or Problems You May Encounter == If you are encountering problems with account setup to outlook.com, hotmail.com, Office 365, or another Microsoft hosted email service, you may see the following issues: # A screen that indicates admin approval is required for the app. This admin approval must be done, but only once. You must ask your admin to approve Thunderbird. (Screenshot and instructions? Not sure how we’ll do this.) # An account worked on Thunderbird 102.6.1, but does not work on 102.7.1 or later. #*Attempt signing in on a new profile? If this works: deleting scopes/login details/etc should make the account work again. (need more details) #*Otherwise, [https://support.mozilla.org/en-US/questions/new/thunderbird/form ask for support]. #IMAP/POP3 work, but SMTP does not work: #*If you have an o365 '''business''' account, check that SMTP Auth is enabled or ask your admin to check. (instructions/screenshot) #* If you have an o365/hotmail/etc '''personal''' account, use basic authentication. (guide on how to change this) #Calendar does not work. #* Thunderbird does not support Exchange calendars. If you are using an add-on or other software to enable calendar, then you will need to seek support from the author of that add-on or software. == Where to Get Help == If you are a user within a business or academic institution that provides Microsoft accounts, you should seek assitance within your organization. If you have a personal account through one of Microsoft's hosted services, [https://support.mozilla.org/en-US/questions/new/thunderbird/form ask for support].

Microsoft has made some changes to authentication for their hosted email services for business and academic accounts. This topic describes these changes and how to adjust to them. As of the date of this article, February 3, 2023, this information is still evolving and subject to change.

Changes to Authentication

Microsoft has instututed the following changes :

• Deprecating basic authentication (username/password), and is instead now requiring oAuth authentication.
• Disabling SMTP Auth entirely, in some cases. For new accounts, SMTP always starts disabled. In addition, there are some restrictions on SMTP that are not currently understood.

Microsoft have also changed the way they classify certain clients, and Thunderbird’s previous oAuth setup does not properly qualify as desktop client. As a result, we have been forced to make configuration changes to Thunderbird which may have side effects for users.

Changes or Problems You May Encounter

If you are encountering problems with account setup to outlook.com, hotmail.com, Office 365, or another Microsoft hosted email service, you may see the following issues:

1. A screen that indicates admin approval is required for the app. This admin approval must be done, but only once. You must ask your admin to approve Thunderbird. (Screenshot and instructions? Not sure how we’ll do this.)
2. An account worked on Thunderbird 102.6.1, but does not work on 102.7.1 or later.
   • Attempt signing in on a new profile? If this works: deleting scopes/login details/etc should make the account work again. (need more details)
   • Otherwise, ask for support.
3. IMAP/POP3 work, but SMTP does not work:
   • If you have an o365 business account, check that SMTP Auth is enabled or ask your admin to check. (instructions/screenshot)
   • If you have an o365/hotmail/etc personal account, use basic authentication. (guide on how to change this)
4. Calendar does not work.
   • Thunderbird does not support Exchange calendars. If you are using an add-on or other software to enable calendar, then you will need to seek support from the author of that add-on or software.

Where to Get Help

If you are a user within a business or academic institution that provides Microsoft accounts, you should seek assitance within your organization.

If you have a personal account through one of Microsoft's hosted services, ask for support.